Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/WaGwxjJjuW9nvL-QyY8pEix6kUI.roa
File: WaGwxjJjuW9nvL-QyY8pEix6kUI.roa (raw, json)
Hash identifier: CRi8QwGHjEF2xOqUoscohQLb4XXNbPLpBebMiQPiJIU=
Subject key identifier: 59:A1:B0:C6:32:63:B9:6F:67:BC:BF:90:C9:8F:29:12:2C:7A:91:42
Certificate issuer: /CN=b2df00f38cced92197993076cb3685bf32bc5e69
Certificate serial: 0192328B3D284E06BB4F6EC1305363286AE7
Authority key identifier: B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/WaGwxjJjuW9nvL-QyY8pEix6kUI.roa
Signing time: Fri 27 Sep 2024 08:13:58 +0000
ROA not before: Fri 27 Sep 2024 08:13:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28941
IP address blocks: 185.103.112.0/22 maxlen: 24
185.199.24.0/22 maxlen: 24
185.204.132.0/22 maxlen: 24
2a0a:9440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:8b:3d:28:4e:06:bb:4f:6e:c1:30:53:63:28:6a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2df00f38cced92197993076cb3685bf32bc5e69
Validity
Not Before: Sep 27 08:13:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59a1b0c63263b96f67bcbf90c98f29122c7a9142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:96:a1:e5:93:1e:a6:96:41:71:5c:0f:54:8c:
83:ac:09:89:6d:54:0d:64:4c:5e:90:29:4f:41:cf:
75:9c:ab:99:4d:aa:f3:e5:94:06:65:9a:85:3c:99:
56:fa:7c:d8:a6:92:89:ae:d4:bf:78:20:e9:79:ad:
be:59:7c:ac:0a:55:10:eb:de:ca:36:3d:74:ff:1a:
57:c9:ef:ce:8a:b7:c1:55:a7:ea:50:d5:99:d6:38:
bd:c1:6a:7d:e3:23:1f:fc:dd:ce:d1:7c:ba:3b:73:
cb:f8:49:26:9e:b6:19:83:9a:87:fa:2c:cc:a8:55:
30:d2:66:98:3d:b1:c2:24:22:7f:ac:7e:4e:95:83:
19:03:11:52:9e:60:9a:9f:cf:23:06:47:d0:cc:47:
b3:29:d1:f9:50:2f:ce:7b:de:38:2e:22:ba:a4:3f:
e6:d4:84:c7:b9:28:da:f1:44:0c:2e:f8:5c:9a:3f:
8d:a4:3d:d0:2c:a7:8c:79:be:85:63:b9:6d:f7:42:
f5:73:e6:a6:1a:03:48:13:4a:d1:14:55:90:50:41:
fc:03:f9:b5:7c:fa:80:e4:02:0c:83:f2:49:ec:9a:
9c:32:b5:53:7e:83:0d:4d:34:a8:22:d7:d3:b8:82:
95:a7:c3:75:a8:9c:b9:a8:1b:69:00:10:e5:33:e1:
35:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A1:B0:C6:32:63:B9:6F:67:BC:BF:90:C9:8F:29:12:2C:7A:91:42
X509v3 Authority Key Identifier:
keyid:B2:DF:00:F3:8C:CE:D9:21:97:99:30:76:CB:36:85:BF:32:BC:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/st8A84zO2SGXmTB2yzaFvzK8Xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/WaGwxjJjuW9nvL-QyY8pEix6kUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/706fa8-52a2-4ed2-a2e1-04e4e4dc5fba/1/st8A84zO2SGXmTB2yzaFvzK8Xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.112.0/22
185.199.24.0/22
185.204.132.0/22
IPv6:
2a0a:9440::/29
Signature Algorithm: sha256WithRSAEncryption
5f:55:29:aa:76:db:fe:ed:fb:fd:58:97:a2:4e:06:3a:47:db:
44:52:9f:1e:97:7f:28:f1:1c:d9:a0:9c:10:0a:dd:0f:1d:0f:
e8:ba:f7:4d:ec:f8:55:a7:24:0c:27:34:8c:c5:0f:a3:c0:1b:
bd:50:d1:e7:09:e3:bf:d5:91:be:4e:cd:59:1f:94:b0:d9:50:
62:8b:2c:8c:22:79:ef:cc:ed:b7:e1:55:f1:15:98:01:a6:b7:
01:6f:fb:34:07:4f:ef:d8:aa:5c:5d:74:af:eb:4a:9e:d5:33:
54:ba:11:a4:dc:c5:db:91:a1:f8:a5:1e:46:86:b5:a3:52:62:
0f:9c:46:60:8d:3b:27:f5:16:42:c1:48:18:74:af:05:47:9b:
12:1f:9f:2c:39:ae:33:31:52:fd:ff:db:ea:90:e7:62:1e:13:
34:ab:b1:2b:fb:c6:6a:fc:99:60:88:e6:74:36:98:1a:51:87:
a0:77:22:16:f2:d4:f5:8b:70:b0:e7:2b:e3:32:36:59:73:8e:
c0:5a:ab:91:1d:88:b6:82:fb:c1:55:dc:6c:ec:9b:3e:c2:a5:
a8:32:c6:e1:17:ef:53:6e:58:eb:8e:1c:99:f3:66:91:d6:b2:
b1:e9:ba:d0:6a:73:d6:e7:13:b1:2f:52:ff:71:33:eb:f3:ab:
bc:b9:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:45 2024 by rpki-client on console-fra.rpki-client.org